CVE-2021-2177

Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization component: Gateway. The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Secure Global...

CVE-2021-2248

Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization component: Server. The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Secure Global...

CVE-2021-2248

CVE-2021-2248 affects Oracle Secure Global Desktop (Server component) with affected version 5.6. Descriptions across NVD/Red Hat/CVEs state an unauthenticated attacker with network access via multiple protocols can compromise Oracle Secure Global Desktop, potentially leading to takeover. The root...

CVE-2021-2221

Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization component: Client. The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Secure Global...

CVE-2021-2221

Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization component: Client. The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Secure Global...

CVE-2021-2177

Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization component: Gateway. The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Secure Global...

CVE-2021-2177

Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization component: Gateway. The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Secure Global...

Oracle Secure Global Desktop Input Validation Error Vulnerability

Oracle Secure Global Desktop is a secure remote access solution for any cloud-hosted enterprise application and hosted desktop running on Microsoft Windows, Linux, Oracle Solaris and mainframe servers. A security vulnerability exists in the Server component of Oracle Secure Global Desktop version...

Oracle Secure Global Desktop Input Validation Error Vulnerability (CNVD-2021-33836)

Oracle Secure Global Desktop is a secure remote access solution for any cloud-hosted enterprise application and hosted desktop running on Microsoft Windows, Linux, Oracle Solaris and mainframe servers. A security vulnerability exists in the Client component of Oracle Secure Global Desktop version...

Oracle Secure Global Desktop Input Validation Error Vulnerability (CNVD-2021-33838)

Oracle Secure Global Desktop is a secure remote access solution for any cloud-hosted enterprise application and hosted desktop running on Microsoft Windows, Linux, Oracle Solaris and mainframe servers. Oracle Secure Global Desktop input validation error vulnerability. An attacker could exploit th...

Oracle Secure Global Desktop 输入验证错误漏洞

Oracle Secure Global Desktop is a secure remote access solution for any cloud-hosted enterprise application and hosted desktop running on Microsoft Windows, Linux, Oracle Solaris and mainframe servers. A security vulnerability exists in the Client component of Oracle Secure Global Desktop version...

Oracle Secure Global Desktop输入验证错误漏洞

Oracle Secure Global Desktop is a secure remote access solution for any cloud-hosted enterprise application and hosted desktop running on Microsoft Windows, Linux, Oracle Solaris and mainframe servers. Oracle Secure Global Desktop input validation error vulnerability. An attacker could exploit th...

Oracle Secure Global Desktop Multiple Vulnerabilities (January 2020 CPU)

The version of Oracle Secure Global Desktop installed on the remote host is missing a security patch from the January 2020 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability exists in the Core Apache Axis component. An...

KLA11471 Multiple vulnerabilities in Oracle VirtualBox

Multiple vulnerabilities were found in Oracle VirtualBox. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information, cause denial of service. Below is a complete list of vulnerabilities: 1. Multiple vulnerabilities in Core component of Oracle ...

Cross site scripting

XSS exists in the Administration Console in Oracle Secure Global Desktop 4.4 20080807152602 but was fixed in later versions including 5.4. helpwindow.jsp has reflected XSS via all parameters, as demonstrated by the sgdadmin/faces/comsunwebui/help/helpwindow.jsp windowTitle parameter...

CVE-2018-19439

XSS exists in the Administration Console in Oracle Secure Global Desktop 4.4 20080807152602 but was fixed in later versions including 5.4. helpwindow.jsp has reflected XSS via all parameters, as demonstrated by the sgdadmin/faces/comsunwebui/help/helpwindow.jsp windowTitle parameter...

CVE-2018-19439

XSS exists in the Administration Console in Oracle Secure Global Desktop 4.4 20080807152602 but was fixed in later versions including 5.4. helpwindow.jsp has reflected XSS via all parameters, as demonstrated by the sgdadmin/faces/comsunwebui/help/helpwindow.jsp windowTitle parameter...

CVE-2018-19439

Oracle Secure Global Desktop (SGD) Administration Console 4.4 contains a reflected Cross-Site Scripting vulnerability in helpwindow.jsp, exploitable via all parameters (notably windowTitle). The underlying issue is reflected XSS in helpwindow.jsp that can execute arbitrary script in a victim’s br...

Oracle Secure Global Desktop Administration Console 4.4 Cross Site Scripting Vulnerability

Oracle Secure Global Desktop Administration Console version 4.4 build 20080807152602 suffers from cross site scripting vulnerabilities. alert"XSS" helpFile=concepts.html&pageTitle=Administrator Help&mastheadUrl=/images/productNameSecondaryMasthead.png&mastheadDescription=Sun Secure Global Desktop...

Oracle Secure Global Desktop Multiple Vulnerabilities (July 2018 CPU)

The version of Oracle Secure Global Desktop installed on the remote host is 5.3 / 5.4 and is missing a security patch from the July 2018 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities: - curl version curl 7.54.1 to and including curl 7.59.0 contains a Heap-based...